Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: PY56BZLLqKoto1+pMoR0XZZE3bFKTvpQEGE/eKuRqtc=
Subject key identifier: B7:2A:3C:24:70:8F:2E:99:0E:02:9F:E5:E7:A1:56:8F:89:F7:01:D7
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 019689CA0CC640013DC95DDEFA0A3DA78387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 0E71
Signing time: Thu 01 May 2025 03:00:42 +0000
Manifest this update: Thu 01 May 2025 03:00:42 +0000
Manifest next update: Fri 02 May 2025 03:00:42 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: Z6K7z5+Dd6+1MVWSNV0ceABuhsHPRQb2jVwgBsRufyQ=)
2: ju7OLwWOvoLnlAHiuO4kBTFVzwY.roa (hash: e9FAsffXnl64K8Cv3+KjxTUevpgUYG3UY/wewoBEVBQ=)
3: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:0c:c6:40:01:3d:c9:5d:de:fa:0a:3d:a7:83:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: May 1 03:00:42 2025 GMT
Not After : May 2 03:00:42 2025 GMT
Subject: CN=b72a3c24708f2e990e029fe5e7a1568f89f701d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:23:cf:2a:a0:61:63:a1:dc:f0:1f:a5:5b:
1a:d2:2b:7a:46:6b:9a:9d:70:d1:14:00:c8:85:c9:
0f:56:b9:4e:19:c2:da:6f:12:3b:03:b0:7b:f1:73:
69:3c:69:37:94:9f:ba:e1:5b:b8:dd:89:f6:38:6b:
0d:5c:f8:8f:5b:b1:8a:91:ad:b0:18:dd:b2:27:80:
db:b7:32:4d:1c:e3:b9:56:ed:44:6e:bc:1e:fe:02:
73:ed:d5:5a:65:8e:d5:c0:fc:47:48:6c:62:23:59:
26:25:c0:08:2c:c2:0f:96:3b:7d:96:d7:ed:50:17:
ff:7f:95:5f:82:f1:a1:18:8b:26:ce:f2:86:cd:2d:
06:4b:37:22:18:27:d0:e8:e4:e3:e2:0b:27:58:67:
b6:fa:1d:48:6e:f1:dc:9b:7e:d7:95:95:24:86:cb:
6a:95:42:09:fb:fe:58:f1:a3:dd:8a:2f:0f:75:3f:
b5:16:59:cd:7a:8e:a1:c0:12:c2:fd:8a:09:18:2f:
6f:28:5a:63:98:09:58:02:f1:34:7b:c0:82:87:9a:
ab:29:9a:7e:5f:cf:1a:02:35:de:1e:0a:d5:2e:b1:
0e:d3:cb:a9:3f:aa:72:a5:6b:07:bb:dd:22:d0:db:
01:9b:39:39:1e:49:0c:c5:73:1d:db:69:02:93:e5:
61:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2A:3C:24:70:8F:2E:99:0E:02:9F:E5:E7:A1:56:8F:89:F7:01:D7
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bf:e9:a5:48:c0:10:16:db:3a:c5:72:dc:88:71:56:6d:59:
3a:1d:79:ab:41:b8:f8:e3:ff:51:f9:81:58:64:8d:38:ea:4c:
e2:ca:df:b8:9c:d7:fa:95:1a:b1:05:fe:29:ec:05:18:c3:63:
09:9b:65:42:ae:a6:62:ff:81:26:5e:ca:b8:35:fe:ab:fc:d8:
68:19:d2:58:e7:a0:37:0a:21:78:cb:a3:c6:2a:6a:45:3d:ff:
95:ec:0d:90:2c:57:c6:8a:31:0a:5b:8b:53:e9:69:4c:b1:61:
82:e2:30:c5:b1:68:3e:64:6a:a0:03:67:20:2c:9e:9d:05:09:
c2:89:3f:db:83:bc:f6:50:6c:d4:9e:42:fe:cc:c2:83:ec:10:
23:2f:a2:d8:2d:d2:5a:57:66:9f:35:4e:35:b5:39:16:15:0b:
08:fb:f2:45:28:08:b9:3c:b3:ca:2a:21:97:a4:29:0d:39:54:
f1:02:ae:98:81:ca:74:94:2c:7f:10:50:bc:f7:1c:60:b6:5f:
bd:f3:a3:1b:f7:b0:c5:0a:4e:7c:46:bf:97:49:5b:99:cf:03:
5f:87:a1:61:a8:af:b3:bb:4b:3d:02:64:93:fa:a8:bf:19:50:
8c:52:e9:24:3c:f5:d6:1d:13:74:86:5f:db:d5:24:f1:c2:17:
96:6c:d3:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJygzGQAE9yV3e+go9p4OHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZGYyNDVlYWQ5OTgwZDJiMzk1MzM3ODJmNjVkNzU2NmQw
NDYyZDEwHhcNMjUwNTAxMDMwMDQyWhcNMjUwNTAyMDMwMDQyWjAzMTEwLwYDVQQD
EyhiNzJhM2MyNDcwOGYyZTk5MGUwMjlmZTVlN2ExNTY4Zjg5ZjcwMWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VwjzyqgYWOh3PAfpVsa0it6Rmua
nXDRFADIhckPVrlOGcLabxI7A7B78XNpPGk3lJ+64Vu43Yn2OGsNXPiPW7GKka2w
GN2yJ4DbtzJNHOO5Vu1Ebrwe/gJz7dVaZY7VwPxHSGxiI1kmJcAILMIPljt9ltft
UBf/f5VfgvGhGIsmzvKGzS0GSzciGCfQ6OTj4gsnWGe2+h1IbvHcm37XlZUkhstq
lUIJ+/5Y8aPdii8PdT+1FlnNeo6hwBLC/YoJGC9vKFpjmAlYAvE0e8CCh5qrKZp+
X88aAjXeHgrVLrEO08upP6pypWsHu90i0NsBmzk5HkkMxXMd22kCk+VhAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcqPCRwjy6ZDgKf5eehVo+J9wHXMB8GA1UdIwQY
MBaAFCHfJF6tmYDSs5UzeC9l11ZtBGLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQt
MGVjNTIzNWQ0ZTlmLzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQtMGVjNTIzNWQ0ZTlm
LzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZb/ppUjA
EBbbOsVy3IhxVm1ZOh15q0G4+OP/UfmBWGSNOOpM4srfuJzX+pUasQX+KewFGMNj
CZtlQq6mYv+BJl7KuDX+q/zYaBnSWOegNwoheMujxipqRT3/lewNkCxXxooxCluL
U+lpTLFhguIwxbFoPmRqoANnICyenQUJwok/24O89lBs1J5C/szCg+wQIy+i2C3S
WldmnzVONbU5FhULCPvyRSgIuTyzyiohl6QpDTlU8QKumIHKdJQsfxBQvPccYLZf
vfOjG/ewxQpOfEa/l0lbmc8DX4ehYaivs7tLPQJkk/qovxlQjFLpJDz11h0TdIZf
29Uk8cIXlmzTww==
-----END CERTIFICATE-----
Generated at Thu May 1 10:23:43 2025 by rpki-client